Botnet IPs & domains — recent threat feed

Nodes participating in botnet activity and automated attacks. Aggregated from 100+ threat intelligence sources, refreshed daily.

486,225

Malicious IPs

6

Malicious domains

2026-07-24

Last updated

Download the full botnet blocklist Check an IP or domain

Recently listed IPs

59.36.151.0 167.172.171.218 80.145.220.17 185.206.242.52 2003:f6:c732:3a0:1d09:8f2a:8b6b:f0f4 47.84.112.85 52.4.76.156 153.117.34.3 111.204.157.197 45.187.41.54 94.249.16.127 115.59.22.223 3.21.75.130 93.255.216.84 218.104.71.166 106.12.186.95 84.173.158.171 59.58.42.9 179.96.185.136 47.236.26.255 106.225.205.36 45.86.202.29 123.245.84.246 216.73.161.227 103.19.58.154 187.85.104.68 64.65.2.14 35.203.211.229 220.177.9.5 45.176.42.105 34.53.158.15 95.181.232.8 117.198.28.201 103.91.246.73 42.248.76.44 179.111.110.195 102.64.41.140 124.88.113.190 49.85.215.23 27.27.181.109 2a03:4000:35:12f::1 165.154.162.127 14.161.106.2 195.206.182.217 189.50.82.145 95.85.190.152 190.64.213.156 61.156.118.230 2602:80d:1007::b1 181.199.62.192 92.209.189.244 151.236.166.93 182.119.196.129 15.204.157.11 180.74.68.121 2804:540:3f6:dc00:7c77:accd:da57:6bbd 35.227.141.66 78.152.219.49 221.11.51.30 182.125.21.166

Recently listed domains

h23.dad meta.source www.gstatic.com meta.desc nightmare-cheats.pw www.nokia.com

Other threat categories

Malware Phishing Command & Control (C2)Spam Scam Fraud Ransomware Abuse Attack Proxy & Anonymizers Suspicious Cryptomining